DE · EN

Call us

apiVersion: soultec.ch/v1kind: Postmetadata: name: vmware-security-advisory-vmsa-2024-0012 locale: en labels: author: daniel-stadelmann capability/security: 2.16 vendor/vmware: 0.88 annotations: source: blog-content/posts/en/vmware-security-advisory-vmsa-2024-0012.md route: /en/insights/vmware-security-advisory-vmsa-2024-0012/ schema: /nerd/schema/posts.json markdown: /en/insights/vmware-security-advisory-vmsa-2024-0012.mdspec: title: VMware Security Advisory date: 2024-06-19 author: daniel-stadelmann locale: en summary: >- VMware has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0012. The issues are rated 7.8 to 9.8 on the CVSS scale. capabilities: [security] vendors: [vmware] hero: /blog-assets/vmware-security-advisory-vmsa-2024-0012/hero.webp migrated: 2026-08-24 translationReviewed: false draft: false sections: - body: | VMware has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0012 and the issues are rated 7.8 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible. Customers with Skyline active should already have been notified of the critical finding. - heading:

VMSA-2024-0012

body: | The published vulnerabilities ([CVE-2024-37079](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37079), [CVE-2024-37080](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37080), [CVE-2024-37081](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37081)) let an attacker who is logged in locally on the vCenter appliance obtain root rights. Only vCenter is affected. Further detail and the fixed version are at [VMware](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453). VMware reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here for you](https://soultec.ch/contact-us/).status: corpus: 267 alsoLike: - {ref: posts/vmware-security-advisory, score: 1.00} - {ref: posts/vmware-security-advisory-vmsa-2022-0030, score: 1.00} - {ref: solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance, score: 0.73}

{ "apiVersion": "soultec.ch/v1", "kind": "Post", "metadata": { "name": "vmware-security-advisory-vmsa-2024-0012", "locale": "en", "labels": { "author": "daniel-stadelmann", "capability/security": "2.16", "vendor/vmware": "0.88" }, "annotations": { "source": "blog-content/posts/en/vmware-security-advisory-vmsa-2024-0012.md", "route": "/en/insights/vmware-security-advisory-vmsa-2024-0012/", "schema": "/nerd/schema/posts.json", "markdown": "/en/insights/vmware-security-advisory-vmsa-2024-0012.md" } }, "spec": { "title": "VMware Security Advisory", "date": "2024-06-19", "author": "daniel-stadelmann", "locale": "en", "summary": "VMware has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0012. The issues are rated 7.8 to 9.8 on the CVSS scale.", "capabilities": [ "security" ], "vendors": [ "vmware" ], "hero": "/blog-assets/vmware-security-advisory-vmsa-2024-0012/hero.webp", "migrated": "2026-08-24", "translationReviewed": false, "draft": false }, "sections": [ { "body": "VMware has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0012 and the issues are rated 7.8 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible. Customers with Skyline active should already have been notified of the critical finding." }, { "heading": "

VMSA-2024-0012

", "body": "The published vulnerabilities ([CVE-2024-37079](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37079), [CVE-2024-37080](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37080), [CVE-2024-37081](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37081)) let an attacker who is logged in locally on the vCenter appliance obtain root rights. Only vCenter is affected. Further detail and the fixed version are at [VMware](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453).\n\nVMware reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here for you](https://soultec.ch/contact-us/)." } ], "status": { "corpus": 267, "alsoLike": [ { "ref": "posts/vmware-security-advisory", "score": "1.00" }, { "ref": "posts/vmware-security-advisory-vmsa-2022-0030", "score": "1.00" }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance", "score": "0.73" } ] }}

apiVersion = "soultec.ch/v1"kind = "Post"[metadata]name = "vmware-security-advisory-vmsa-2024-0012"locale = "en"[metadata.labels]author = "daniel-stadelmann""capability/security" = "2.16""vendor/vmware" = "0.88"[metadata.annotations]source = "blog-content/posts/en/vmware-security-advisory-vmsa-2024-0012.md"route = "/en/insights/vmware-security-advisory-vmsa-2024-0012/"schema = "/nerd/schema/posts.json"markdown = "/en/insights/vmware-security-advisory-vmsa-2024-0012.md"[spec]title = "VMware Security Advisory"date = 2024-06-19author = "daniel-stadelmann"locale = "en"summary = "VMware has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0012. The issues are rated 7.8 to 9.8 on the CVSS scale."capabilities = ["security"]vendors = ["vmware"]hero = "/blog-assets/vmware-security-advisory-vmsa-2024-0012/hero.webp"migrated = 2026-08-24translationReviewed = falsedraft = false[[sections]]body = "VMware has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0012 and the issues are rated 7.8 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible. Customers with Skyline active should already have been notified of the critical finding."[[sections]]heading = "

VMSA-2024-0012

"body = '''The published vulnerabilities ([CVE-2024-37079](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37079), [CVE-2024-37080](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37080), [CVE-2024-37081](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37081)) let an attacker who is logged in locally on the vCenter appliance obtain root rights. Only vCenter is affected. Further detail and the fixed version are at [VMware](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453).VMware reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here for you](https://soultec.ch/contact-us/).'''[status]corpus = 267[[status.alsoLike]]ref = "posts/vmware-security-advisory"score = "1.00"[[status.alsoLike]]ref = "posts/vmware-security-advisory-vmsa-2022-0030"score = "1.00"[[status.alsoLike]]ref = "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance"score = "0.73"

<?xml version="1.0" encoding="UTF-8"?><manifest kind="Post"> <apiVersion>soultec.ch/v1</apiVersion> <metadata> <name>vmware-security-advisory-vmsa-2024-0012</name> <locale>en</locale> <labels> <author>daniel-stadelmann</author> <entry key="capability/security">2.16</entry> <entry key="vendor/vmware">0.88</entry> </labels> <annotations> <source>blog-content/posts/en/vmware-security-advisory-vmsa-2024-0012.md</source> <route>/en/insights/vmware-security-advisory-vmsa-2024-0012/</route> <schema>/nerd/schema/posts.json</schema> <markdown>/en/insights/vmware-security-advisory-vmsa-2024-0012.md</markdown> </annotations> </metadata> <spec> <title>VMware Security Advisory</title> <date>2024-06-19</date> <author>daniel-stadelmann</author> <locale>en</locale> <summary>VMware has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0012. The issues are rated 7.8 to 9.8 on the CVSS scale.</summary> <capabilities> <item>security</item> </capabilities> <vendors> <item>vmware</item> </vendors> <hero>/blog-assets/vmware-security-advisory-vmsa-2024-0012/hero.webp</hero> <migrated>2026-08-24</migrated> <translationReviewed>false</translationReviewed> <draft>false</draft> </spec> <sections> <section> <body>VMware has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0012 and the issues are rated 7.8 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible. Customers with Skyline active should already have been notified of the critical finding.</body> </section> <section> <heading>

VMSA-2024-0012

</heading> <body>The published vulnerabilities ([CVE-2024-37079](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37079), [CVE-2024-37080](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37080), [CVE-2024-37081](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37081)) let an attacker who is logged in locally on the vCenter appliance obtain root rights. Only vCenter is affected. Further detail and the fixed version are at [VMware](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453).VMware reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here for you](https://soultec.ch/contact-us/). </body> </section> </sections> <status> <corpus>267</corpus> <alsoLike> <item> <ref>posts/vmware-security-advisory</ref> <score>1.00</score> </item> <item> <ref>posts/vmware-security-advisory-vmsa-2022-0030</ref> <score>1.00</score> </item> <item> <ref>solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance</ref> <score>0.73</score> </item> </alsoLike> </status></manifest>

Post · 2024-06-19

VMware Security Advisory

VMware has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0012. The issues are rated 7.8 to 9.8 on the CVSS scale.

2024-06-19Date

Daniel StadelmannAuthor

1Min read

Topics Security 2.16

Vendors VMware 0.88

VMware has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0012 and the issues are rated 7.8 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible. Customers with Skyline active should already have been notified of the critical finding.

VMSA-2024-0012

The published vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081) let an attacker who is logged in locally on the vCenter appliance obtain root rights. Only vCenter is affected. Further detail and the fixed version are at VMware.

VMware reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, we are here for you.

post 1.00